CVE-2026-111142: Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing zzipdiskentrystrdupname to read past the buffer and crash the application.
Affected Software
Event History
Frequently Asked Questions
What input must an attacker control to trigger this issue?
An attacker needs to supply a crafted ZIP file whose central directory includes an end-of-central-directory record that places the first entry near the end of the mapped buffer. Processing that archive can cause zzip_disk_entry_strdup_name to read beyond the buffer.
What is the practical impact of successful exploitation?
The documented impact is an application crash due to an out-of-bounds heap read. The provided information does not establish confidentiality or integrity impact.
Which versions should be considered affected?
ZZIPlib versions through 0.13.80 are identified as affected. No fixed version is provided in the available data.